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What is claimed is: 

1. A network security architecture for monitoring security activities in a mobile 
network platform, comprising 

a mobile network residing on the mobile network platform, the mobile 
network includes a plurality of user access points such that each user access point 
is defined by an enforced network address; 

an intrusion detection system connected to the mobile network and residing 
on the mobile network platform, the intrusion detection system operable to detect a 
security intrusion event that is associated with a first user access point from the 
plurality of user access points; and 

a mobile security manager residing on the mobile network platform, the 
mobile security manager is adapted to receive the security intrusion event from the 
intrusion detection system and operable to issue a security response command in 
response to the security intrusion event, where the security response command is 
directed to said first user access point. 
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2. The network security architecture of Claim 1 further comprising a security 
response actuator residing on the mobile network platform, the security response actuator 
adapted to receive the security response command from the security manager and 
operable to perform security response activities in response to the security response 
command. 

3. The network security architecture of Claim 2 the security response actuator 
is operable to prevent transmission of data packets to a given user access point, where 
the data packets are not associated with the given user access point. 

4. The network security architecture of Claim 2 the security response actuator 
is operable to prevent transmission of data packets from a given user access point. 

5. The network security architecture of Claim 2 wherein the security response 
actuator is operable to enforce a network address for each of the plurality of user access 
points, where the network address is dynamically assigned to a given user access point 
when a computing device is in data communication with the given user access point. 
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6. The network security architecture of Claim 3 further comprising an address 
manager connected to the security response actuator and operable to dynamically assign 
a network address for any one of the plurality of user access points. 



7. A method for monitoring security activities associated with a network 
residing in a mobile network platform, comprising: 

providing a plurality of user access points to the network, such that each of 
the user access points have an enforced network address; 

detecting a security intrusion event whose origination is associated with one 
of the plurality of user access points; and 

performing a security response activity in response to the detested security 
intrusion event, when the security response activity is directed to said one of the 
plurality of user access points. 
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